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Top Stories 

• Federal prosecutors charged four employees at Arch Coal’s Mountain Laurel mining 
complex in Logan County, West Virginia, for allegedly taking almost $2 million in bribes 
by requiring vendors to pay kickbacks to the employees in order to do business with the 
coal company. - Associated Press (See item 3) 

• U.S. and European law enforcement authorities and several companies cooperatively 
seized servers and disrupted the operations of the GameOver Zeus financial fraud botnet 
May 30. - Threatpost (See item 6) 

• The U.S. Centers for Disease Control and Prevention reported an additional 66 cases 
related to an ongoing Salmonella outbreak linked to live poultry from Mt. Healthy 
Hatcheries in Springfield Township, Ohio, bringing the case count to 126 across 26 States. 
- Food Safety News (See item 16 ) 

• A database used by the Arkansas State University was breached, potentially exposing the 
personal information of about 50,000 individuals. - Arkansas Business (See item 27 ) 
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Energy Sector 



1. June 2, Associated Press - (Pennsylvania) MarkWest reopens 2 of 3 plants after 
lightning. Two of three plants at a MarkWest Energy Partners natural gas refinery 
plant in Houston, Pennsylvania, were reopened June 2 after the refinery was struck by 
lightning May 28, causing the damage to the plants and prompting a gas leak and 
evacuation. The third plant is still being repaired. 

Source: http://www.seattlepi.com/news/article/Markwest-reopens-2-of-3-plants-after- 
hghtning-5522004.php 

2. May 31, Easton Express-Times - (Pennsylvania) Portland Generating Station stops 
using coal to make electricity. The NRG Energy-owned Portland Generating Station 
in Upper Mount Bethel Township shut down its coal-fired boilers permanently May 31, 
as part of a resolution to stop using coal at the plant to reduce pollution. The utility 
plans to have the boilers back online by 2016, burning low-sulfur diesel fuel to make 
electricity. 

Source: http://www.lehighvalleylive.com/slate- 
belt/index.ssf/2014/05/portland generating station st.html 

3. May 30, Associated Press - (West Virginia) Feds: Arch Coal workers at West 
Virginia mine accused of taking $2M in kickbacks from vendors. Federal 
prosecutors charged four employees at Arch Coal’s Mountain Laurel mining complex 
in Logan County, West Virginia, for allegedly taking almost $2 million in bribes from 
2007 to 2012 by requiring vendors to pay kickbacks to the employees in order to do 
business with the coal company. A total of 10 individuals, including vendors and 
contractors, were charged in the scheme. 

Source: http://www.570news.com/2014/05/30/feds-arch-coal-workers-at-west-virginia- 
mine-accused-of-taking-2m-in-kickbacks-from-vendors/ 

4. May 30, Dunn County News - (Wisconsin) Man hospitalized after ammonia leak. 
The Big River Resources plant and the Air Products plant in Boyceville were both 
evacuated for 2 hours due to an ammonia leak caused by a pressure relief valve on an 
ammonia storage tank which opened for an undetermined reason May 29. The leak 
caused one employee to be transported to an area hospital after inhaling the gas. 

Source: http://www.leadertelegram.com/local news/story/article 9dlc928c-e7b4-l le3- 
9db5-0019bb2963f4.html 

[ Return to top ] 

Chemical Industry Sector 

See items 4 and 15 
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Nuclear Reactors, Materials, and Waste Sector 



Nothing to report 



[ Return to top ] 

Critical Manufacturing Sector 

5. May 31, WTVD 11 Durham - (North Carolina) Fire damages Sampson County 

factory. A 3-alarm fire at the Hog Slat metal fabrication and roofing factory in Newton 
Grove caused extensive damage after starting in a storage area May 30. The company 
planned to resume operations June 2. 

Source: http://abcll.com/news/fire-damages-sampson-countv-factory/86351/ 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

6. June 2, Threatpost - (International) FBI, European authorities go after GameOver 
Zeus botnet. U.S. and European law enforcement authorities and several companies 
cooperatively seized servers and disrupted the operations of the GameOver Zeus botnet 
May 30, and are seeking a Russian citizen allegedly connected to the operation of the 
peer-to-peer (P2P) botnet. The botnet is used to perform wire fraud by stealing 
financial credentials and then transferring money to accounts controlled by its 
operators. 

Source: http ://threatpost . com/fbi -european- authorities - go- after- gameo ver-zeus -botnet 

7. June 2, Security Week - (International) Middle East hackers target government 
departments, U.S. financial institution. FireEye researchers identified an attack 
campaign targeting an undisclosed U.S. financial institution as well as government 
agencies in several countries that attempts to drop remote access trojans (RATs) on 
targets’ systems. The researchers attributed the campaign to a Middle Eastern group 
known as “Operation Molerats” due to the location of the attack infrastructure and the 
variants of the Poison Ivy and Xtreme RATs used. 

Source: http://www.securitvweek.com/middle-east-hackers-target-government- 
departments-us-financial-institution 

8. May 30, SC Magazine - (International) Card Recon tool repurposed by attackers to 
sniff out payment card data. Researchers at Arbor Networks and Trend Micro 
reported finding the legitimate Card Recon compliance software being used by 
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attackers to seek out payment card data in point-of-sale (PoS) infrastructure. The 
legitimate software seen was cracked for use by attackers and included in attack 
tool ki ts along with PoS malware. 

Source: http://www.scmagazine.com/card-recon-tool-repurposed-by-attackers-to-sniff- 
out-payment-card-data/article/349265/ 

9. May 30, U.S. Securities and Exchange Commission - (Texas) SEC charges 
accomplice in forex trading scheme. The U.S. Securities and Exchange Commission 
(SEC) filed charges in federal court in Texas against a man who allegedly provided 
substantial assistance to KGW Capital Management and its owner as part of a fraud 
scheme that raised around $7.4 million from investors between 2011 and 2013 through 
Revelation Forex, a foreign currency exchange trading entity. 

Source: http ://w w w. sec. go v/litigation/litreleases/20 1 4/lr230 1 0.htm 
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Transportation Systems Sector 

10. June 2, WOKV 104.5 FM Jacksonville - (Florida) Train carrying ethanol derails in 
Alachua County. A total of 15-20 CSX rail cars derailed June 2 in Alachua County 
while transiting from Waycross, Georgia to Tampa, Florida. Two of the rail cars were 
known to be carrying sulfuric acid and ethanol, but no leaks or injuries were reported. 
Source: http://www.wokv.com/news/news/local/train-carrying-ethanol-derails-alachua- 
county/ngB2c/ 

11. June 1, WCVB 5 Boston - (Massachusetts) 7 dead after plane catches fire, crashes on 
takeoff from Hanscom Field. The Federal Aviation Administration is investigating 
after a small private jet crashed June 1 and erupted into flames, killing all seven people 
onboard as it was leaving Hanscom Field at Hanscom Air Force Base in Massachusetts. 
Source: http://www.wcvb.com/news/plane-crashes-on-takeoff-at-hanscom-air-force- 
base/26271540 

12. June 1, WKBT 8 La Crosse - (Wisconsin) Washout closes Highway 33 in La Crosse. 
A portion of Highway 33 in Fa Crosse, Wisconsin was closed for several hours June 1 
after rain washed out a part of the highway, damaging the road surface. 

Source: http://www.news8000.com/news/washout-closes-highway-33-in-la- 
crosse/26280384 

13. May 31, San Francisco Chronicle - (California) Fatal crash shuts down Highway 84 
near Sunol. Westbound Highway 84 in Alameda County was shut down for several 
hours May 31 after a multi-car crash killed one person and injured several others. 
Source: http://www.sfgate.com/bavarea/article/Fatal-crash-shuts-down-Highway-84- 
near-Sunol-5520101.php 

14. May 31, WATE 26 Knoxville - (Tennessee) 2 killed in crash, fire on I-40E at 
Asheville Highway. Eastbound Interstate 40 was shut down for about 4 hours May 30 
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after a semi-truck rear-ended another vehicle, causing it to rear-end a third vehicle, 
killing two people. A second accident occurred on the same highway when another 
semi-truck collided with a vehicle and the side- swiped a separate semi-truck, injuring 
one person. 

Source: http://www.wate.com/storv/25654463/i-40-eb-closed-due-to-crash-fire-at- 
asheville-highway 

15. May 30, Carbondale Southern Illinoisan - (Illinois) Ethanol truck overturns on 1-64. 
A man was cited May 30 near Mount Vernon, Illinois, after excessive speeds caused 
him to overturn a semi-truck on Interstate 64, spilling a small amount of ethanol and 
prompting officials to shut down the Interstate for several hours. 

Source: http://thesouthern.com/news/local/ethanol-truck-overtums-on- 
i/article c32d65fc-1097-5943-a427-ae8e22ee9dba.html 
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Food and Agriculture Sector 

16. May 31, Food Safety News - (National) 126 sickened by Salmonella in live poultry 
outbreak. The U.S. Centers for Disease Control and Prevention reported an additional 
66 cases related to an ongoing Salmonella outbreak linked to live poultry from Mt. 
Healthy Hatcheries in Springfield Township, Ohio, bringing the case count to 126 since 
the illnesses were first announced May 8. Sicknesses related to the outbreak began 
between February 4 and May 15 and span across 26 States. 

Source: http://www.foodsafetvnews.com/2014/05/126-sick-with-salmonella-in-live- 
poultry-outbreak 

17. May 30, Newark Star Ledger - (New Jersey) Internal collapse in Maplewood 
restaurant kills 1, injures 1. One construction worker was killed and a second injured 
when masonry work collapsed from the first floor into the basement of Coda Kitchen & 
Bar in Maplewood, New Jersey, while the workers were installing a staircase inside the 
restaurant May 30. 

Source: 

http://www.ni.com/essex/index.ssf/2014/05/maplewood restaurant where roof collap 
sed was undergoing construction customers say.html 

18. May 30, Threatpost - (International) Monsanto suffers data breach at Precision 
Planting unit. Monsanto disclosed that the company discovered March 27 that an 
unauthorized party accessed the company’s network and may have accessed personal 
information, including Social Security numbers and tax information, of more than 
1,200 customers and employees at its Precision Planting subsidiary. The company 
contained the incident and is working to remediate the issue. 

Source: http://threatpost.com/monsanto-suffers-data-breach-at-precision-planting-unit 

19. May 30, WVNY 22 Burlington - (Vermont) Cheese truck catches fire on 1-89. A semi- 
truck carrying 34,000 pounds of cheese caught fire on Interstate 89 near Richmond 
May 30 due to a mechanical failure in the trailer’s brakes. The semi-truck and its 
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contents were deemed a complete loss. 

Source : http://www.mvchamplainvallev.com/story/d/story/cheese-truck-catches-fire- 
on-i-89/36200/gHPBlARbbkCYqRhqEB65ag 

20. May 29, Torrance Daily Breeze - (California) 2 injured in fire at King’s Hawaiian 
bakery in Harbor Gateway. Authorities are investigating after a fire broke out inside 
a piece of machinery and spread to an adjacent room at a King’s Hawaiian bakery in 
the Harbor Gateway area of Los Angeles May 29, prompting the facility to evacuate. 
Two workers suffered smoke inhalation and were treated at the scene. 

Source: http://www.dailybreeze.com/general-news/20140529/2-iniured-in-fire-at- 
kings-hawaiian-bakery-in-harbor-gateway 
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Water and Wastewater Systems Sector 

21. June 1, Canton Repository - (Ohio) East Sparta to get new water-treatment plant. 
The village of East Sparta, Ohio, approved plans for a new water-treatment plant, 
abandoning its previous facility on Marathon Petroleum’s storage and pipeline yard in 
Stark County due to safety and health concerns. The project is slated to cost more than 
$2.15 million, produce a daily average flow of 105,000 gallons per day, and be 
completed in about a year. 

Source: 

http://www.timesreporter.com/article/20140531/NEWS/140539850/10676/SPECIAL 

22. May 30, Lihue Garden Island - (Hawaii) Water woes could last 6 weeks. Residents in 
Kalaheo were urged to continue conservation of water in order to lessen the impact of 
water outages after officials installed a temporary pipeline May 29 to help provide 
improvements to water service. Authorities stated it could take up to 6 weeks to fully 
repair damage to the shaft that took down the area’s primary well and backup deep 
well. 

Source: http://thegardenisland.com/news/local/water-woes-could-last- 
weeks/article 64774f0e-e7cc-l Ie3-8e90-001a4bcf887a.html 



23. May 30, KXTV 10 Sacramento - (California) Alleged pot growers farm next to 

Modesto water treatment plant. Three individuals were arrested May 28 and charged 
with water theft, water pollution, and other charges in connection with an elaborate 
$12.6 million marijuana growing farm near the Modesto water treatment plant. Law 
enforcement found a generator, a sophisticated system of water pumps, and several 
miles of water lines connecting grow plots at the ranch next to the water facility, as 
well as two tons of garbage and hazardous materials polluting a San Joaquin River 
tributary. 

Source: 

http://www.newsl0.net/storv/news/local/modesto/2014/05/30/modesto-water- 
treatment-marijuana- grow/9793 149/ 
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Healthcare and Public Health Sector 



24. May 31, KTUL 8 Tulsa - (Oklahoma) McAlester Health Center back to normal after 
power outage. McAlester Regional Health Center in Oklahoma lost Internet, phone, 
and power service for about 7 hours May 31 due to a power outage. Pittsburg County 
Emergency Management diverted patients to nearby facilities during the outage. 

Source: http://www.ktul.com/story/25660979/power-outage-at-health-center-in- 
mcalester 
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Government Facilities Sector 

25. June 1, KVOA 4 Tucson - (Arizona) Slide Rock State Park reopens today. Crews 
reached 90 percent containment June 1 of the 21,217-acre Slide Fire in Sedona, 
prompting the reopening of Slide Rock State Park due to containment efforts. 

Source: http://www.kvoa.com/news/slide-rock-state-park-reopens-today/ 

26. May 31, Staten Island Advance - (New York) Tottenville High School will reopen 
Monday following fire. Tottenville High School in Staten Island reopened June 2 after 
a May 30 electrical fire that prompted the evacuation and closure of the school for 
cleanup and repairs. 

Source: 

http://www.silive.com/southshore/index.ssf/2014/05/tottenville high school will r.ht 
ml 

27. May 30, Arkansas Business - (Arkansas) Arkansas State notified of data breach; up 
to 50,000 could be affected. Arkansas State University was notified by the Arkansas 
Department of Human Services May 28 that a database used by the College of 
Education and Behavioral Science’s Department of Childhood Services was breached, 
potentially exposing the personal information of about 50,000 individuals. The third- 
party site was taken offline and authorities are investigating the incident. 

Source: http://www.arkansasbusiness.com/article/99018/arkansas-state-notified-of- 
data-breach-up-to-50000-could-be-affected 

28. May 30, WSHM 3 Springfield - (Massachusetts) 9 students hospitalized following 
school bus accident. An accident between an E. N. White School bus and a truck left 
nine students and both drivers injured when the truck crashed into the bus in Holyoke 
May 30. 

Source: http://www.cbs3springfield.com/storv/25653995/school-bus-vs-dump-truck- 
accident-reported-in-holyoke 

For another story, see item If 
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Emergency Services Sector 



29. May 31, WCVB 5 Boston - (Massachusetts) Diesel fuel leak shuts down Boston 
hospital’s emergency room. The emergency room at Brigham and Women’s Faul kn er 
Hospital in Boston was shut down May 31 due to a diesel fuel leak originating from 
behind the emergency room’s wall. Hospital officials will reopen the emergency room 
once clean up and repairs are completed. 

Source: http://www.wcvb.com/news/diesel-fuel-leak-shuts-down-boston-hospitals- 
emergency-room/26268298 

30. May 30, Associated Press - (Mississippi) 3 indicted on conspiracy charges in prison 
riot. Federal prosecutors announced May 30 that three inmates were charged with 
conspiracy to commit murder while two others were charged with rioting in connection 
to the May 2012 riot at the Adams County Correctional Facility in Natchez where 1 
guard was killed and 20 people were injured. A number of other inmates were charged 
or convicted for participating in the riot. 

Source: http://www.clarionledger.com/story/news/2014/05/31/indicted-conspiracv- 
charges-prison-riot/9801639/ 

For another story, see item 37 
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Information Technology Sector 

31. June 2, Security Week - (International) New Heartbleed attack vectors impact 
enterprise wireless, Android devices. A security researcher detailed new attack 
methods for using the Heartbleed vulnerability in OpenSSL which could allow attacks 
over the Extensible Authentication Protocol (EAP) used in wireless networks and peer- 
to-peer (P2P) connections. The new vectors can threaten enterprise wireless networks, 
Android devices, and other connections. 

Source: http://www.securitvweek.com/new-heartbleed-attack-vectors-impact- 
enterprise-wireless-android-devices 

32. June 2, The Register - (International) Flaws open gates to WordPress en-masse SEO 
beat-down. A patch was released June 1 for the popular All in One SEO Pack plugin 
for WordPress, closing vulnerabilities which could allow attackers to launch privilege 
escalation and cross-site scripting (XSS) attacks in sites using older versions of the 
plugin. Users were advised to update their installations. 

Source: 

http://www.theregister.co.uk/2014/Q6/Q2/flaws open gates to wordpress enmasse se 
o beatdown/ 

33. May 30, Threatpost - (International) Apache patches DoS, information disclosure 
bugs in Tomcat. The Apache Software Foundation released a patch for Tomcat, 
closing three information disclosure vulnerabilities and one denial of service issue. 



Users were advised to apply the patches to their installations. 

Source: http://threatpost.com/apache-patches-dos-information-disclosure-bugs-in- 
tomcat 



For another story, see item 6 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

34. June 2, WUSA 9 Washington, D.C. - (Maryland; Virginia) More details on theater 
bottle bombs suspect expected. Police arrested a Maryland man on charges connected 
to manufacturing and using a bottle bomb at Prince George’s County, Maryland and 
Fairfax County, Virginia movie theaters in May. The suspect is believed to be 
connected to as many as seven related incidents across the Maryland, Virginia, and 
Washington, D.C. region. 

Source: http://m.wusa9.com/news/article?a=9838987&f=231 

35. June 2, Norfolk Virginian-Pilot - (Virginia) Shooting injures 3 at Virginia Beach 
club. Police responded to Club Lavish in Virginia Beach June 2 after a fight broke out 
inside the nightclub and three individuals were injured by gunfire. 

Source: http://hamptonroads.com/2014/06/shooting-iniures-3-virginia-beach-club 

36. June 1, Toledo Blade - (Ohio) Officials investigate Monroe apartment fire. A total 
of 49 families were displaced by a fire that destroyed the Flidden Trail Apartments 
complex in Monroe, Ohio, May 31 . The cause of the fire is under investigation. 

Source: http://www.toledoblade.com/Police-Fire/2014/06/01/49-families-displaced-bv- 
fire-in-Monroe.html 

37. June 1, Canton Repository - (Ohio) Blown transformer closes Wal-Mart, Kmart; 
affects sheriff's phones. A transformer caught fire in Canton June 1, prompting two 
retail stores to evacuate and close for the day due to power outages, and temporarily 
disabling the main phone lines of the Stark County Sheriffs Office. Power and phone 
service was restored after several hours, while 9-1-1 service was not affected. 
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Source: 

http://www.cantonrep.com/article/20140601/NEWS/140609987/10511/SPECIAL 



38. June 1, Associated Press - (North Carolina) Nightclub shooting leaves man dead in 
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Lumberton. One person was killed and a second person was injured May 31 when 
gunfire broke out inside Club Kalipzo in Lumberton, North Carolina. Authorities asked 
the public for help in tracking down any of nearly 100 patrons who were inside the 
nightclub at the time of the incident but left the scene before police arrived. 

Source: http://www.wral.com/niahtclub-shooting-leaves-man-dead-in- 
lumberton/1 3692084/ 



Dams Sector 

Nothing to report 
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